Categories: Malware

Lazy.495633 information

The Lazy.495633 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.495633 virus can do?

Behavioural detection: Executable code extraction – unpacking
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Lazy.495633?


File Info:
name: 2AD7D8BD57C920334E53.mlwpath: /opt/CAPEv2/storage/binaries/01276701a6286e402da9b53be9cb9ddd0d79d8521856ee1f18c3f34b10a767dacrc32: 0FAFFF76md5: 2ad7d8bd57c920334e536c38ddd3adf2sha1: bd59e4e4829edf24fc4ae01b462423c43bb5e6b7sha256: 01276701a6286e402da9b53be9cb9ddd0d79d8521856ee1f18c3f34b10a767dasha512: 017e150d243f2788866878ab9dc97c58121ae95e5e64b472c935c7ccbaf58470b1af30533698f433000c99b5499dbb57a53301f646552357ad2c0140b52fb630ssdeep: 6144:YL3Si21LwgxYvwsrWpAVs5uPD6h9EPjcsQ8MRtgY0xwAf1mSYM1y5kfvhepABmE9:51LVXsCpn5K6hKLQ8MboRo+EWh4GmPtwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16FA4BE32B668B535ECE221F4854CF3F5726B94701B1483D7A394C7EDAAE5AC11E3029Bsha3_384: be1c0432b746f8e7be58952896703b6c1ae40753e6b6af881bfb7c556acf2f73a1fea2994ce4739982d946d2af903f2eep_bytes: 50575229c083c030648b38518b4f0889timestamp: 2004-12-30 14:21:34
Version Info:
CompanyName: Microsoft Corp., Veritas SoftwareFileDescription: Logical Disk Manager service processFileVersion: 2600.2180.503.0InternalName: dmadminLegalCopyright: Copyright © 1985-2000 Microsoft Corporation.  All rights reserved. 
Portions Copyright © 1997-2000 Veritas Software.  All rights reserved.OriginalFilename: dmadmin.exeProductName: Logical Disk Manager for Windows NTProductVersion: 1.0Translation: 0x0409 0x04e4

Lazy.495633 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Expiro-GX [Inf]
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.495633
FireEye	Generic.mg.2ad7d8bd57c92033
Skyhigh	BehavesLike.Win32.Expiro.gc
McAfee	Generic Obfuscated.g
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Virus:Win32/Expiro.ac75dbf7
K7GW	Virus ( 00512af51 )
K7AntiVirus	Virus ( 00512af51 )
BitDefenderTheta	Gen:NN.ZexaF.36804.Eq0@au8Mr9li
VirIT	Win32.Expiro.CP
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Expiro.NCJ
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Virus.Expiro-6956557-0
Kaspersky	Virus.Win32.Expiro.ns
BitDefender	Gen:Variant.Lazy.495633
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:Expiro-GX [Inf]
Tencent	Virus.Win32.Expiro.ae
TACHYON	Virus/W32.Expiro
Emsisoft	Gen:Variant.Lazy.495633 (B)
F-Secure	Malware.W32/Expiro.QQ
DrWeb	Win32.Expiro.134
VIPRE	Gen:Variant.Lazy.495633
Trapmine	malicious.high.ml.score
Sophos	W32/Expiro-AC
SentinelOne	Static AI – Malicious PE
Varist	W32/Expiro.A!Generic
Avira	W32/Expiro.QQ
Antiy-AVL	Virus/Win32.Expiro.cg
Kingsoft	malware.kb.a.990
Microsoft	Virus:Win32/Expiro.EM!bit
Xcitium	Virus.Win32.Expiro.CG@79ayaa
Arcabit	Trojan.Lazy.D79011
ZoneAlarm	Virus.Win32.Expiro.ns
GData	Gen:Variant.Lazy.495633
Google	Detected
VBA32	Heur.Trojan.Hlux
ALYac	Gen:Variant.Lazy.495633
MAX	malware (ai score=83)
Malwarebytes	Generic.Malware.AI.DDS
Rising	Virus.Expiro!1.A140 (CLASSIC)
Ikarus	Virus.Win32.Expiro
Fortinet	W32/Expiro.CG
DeepInstinct	MALICIOUS
alibabacloud	Virus:Win/Expiro.AW(dyn)